Hi,

The syslog facility calculation is wrong.
I created a Jira issue https://issues.apache.org/jira/browse/FLUME-1427
and submitted a patch.

In short, priority = (facility*8) + severity
so
 severity = priority % 8
 facility = (priority - severity) /8 ;

but in SyslogUtils's buildEvent, facility = (priority - severity)
i.e. /8 is missing.

The patch is very small and straight forward, can this be applied on 1.2.0
branch and 1.3.0(trunk)

thanks
Bhaskar